Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
File:                     P1vEQBQoW28-KHKuz11PM-Jozos.mft (raw, json)
Hash identifier:          gzaLUWWAB5eVOuUawfbgRodvUgH9r7Am6GiwnxAoOlU=
Subject key identifier:   17:FE:1C:CA:09:ED:56:D4:00:78:10:5F:0A:A9:66:54:9C:3A:C9:28
Authority key identifier: 3F:5B:C4:40:14:28:5B:6F:3E:28:72:AE:CF:5D:4F:33:E2:68:CE:8B
Certificate issuer:       /CN=3f5bc44014285b6f3e2872aecf5d4f33e268ce8b
Certificate serial:       01962DF406B9E784BF10C582A31B3AB6C9DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
Manifest number:          05E8
Signing time:             Sun 13 Apr 2025 07:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:29 +0000
Files and hashes:         1: AcEkQsHgOk9cJvafcwY_24-gqJU.roa (hash: P0WFMbng9Ro3ND0yeTy1ArY8fd/+6N/p4Vx6hJOnIpk=)
                          2: AhGacAZRO8Gx3hNBgiDjl4oZgqI.roa (hash: /EpJOq122VUgjLXObaWDOaWwB7lmX3CrZN3WS11mATY=)
                          3: P1vEQBQoW28-KHKuz11PM-Jozos.crl (hash: RoJy5EWhEoGwca6ina0Lqna+o+M7uSSosw9vk3fWgWE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:06:b9:e7:84:bf:10:c5:82:a3:1b:3a:b6:c9:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f5bc44014285b6f3e2872aecf5d4f33e268ce8b
        Validity
            Not Before: Apr 13 07:01:29 2025 GMT
            Not After : Apr 14 07:01:29 2025 GMT
        Subject: CN=17fe1cca09ed56d40078105f0aa966549c3ac928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:54:51:55:c5:2c:19:11:ea:c8:74:cb:13:0f:
                    16:b5:89:b8:56:f1:f3:03:ed:9b:5f:89:81:25:4f:
                    d6:f9:37:2f:0c:6e:b0:34:3b:52:d2:2c:3f:0a:d6:
                    69:c3:c1:45:4a:de:e4:8e:70:fe:69:96:50:0b:3e:
                    a0:55:cc:80:59:79:8c:b5:d9:99:08:34:86:ae:18:
                    a1:1a:66:b7:28:a0:42:24:8c:2c:45:60:3c:c4:11:
                    aa:d0:2d:44:60:6e:63:89:e0:ab:77:0a:1a:b5:36:
                    cf:ed:41:ca:89:07:97:84:21:48:43:2f:21:66:24:
                    26:19:85:72:32:2d:43:d7:ea:58:fa:64:18:69:da:
                    83:4a:1b:4b:66:86:92:4a:0e:f1:c5:3d:19:6a:19:
                    8a:38:10:39:99:8c:87:d4:43:83:66:26:5d:31:74:
                    ef:1d:5e:69:fb:ca:1c:6c:55:cb:82:cd:01:b5:02:
                    7d:26:58:10:e3:f7:e8:c9:75:3f:0e:ba:30:e0:c0:
                    4d:04:6f:c5:ae:78:e8:e1:4c:94:e9:be:79:d0:e3:
                    04:ae:5f:5c:5c:55:a4:4a:9b:f2:5c:d5:d2:22:39:
                    f0:86:48:72:f0:0a:f0:e6:b3:1c:37:0d:96:bf:44:
                    c4:b9:8a:bf:ea:bf:81:31:56:1a:28:d4:d7:9a:35:
                    b4:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:FE:1C:CA:09:ED:56:D4:00:78:10:5F:0A:A9:66:54:9C:3A:C9:28
            X509v3 Authority Key Identifier:
                keyid:3F:5B:C4:40:14:28:5B:6F:3E:28:72:AE:CF:5D:4F:33:E2:68:CE:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:27:f3:25:9b:cb:38:69:b1:19:b7:9b:10:5d:fc:8f:4c:d0:
         e0:03:b3:64:98:0f:39:67:ef:9b:a7:41:31:1c:79:36:cb:0c:
         81:46:32:9c:f1:8e:b3:f5:13:15:7e:e0:67:4b:e4:32:70:74:
         36:78:14:93:11:06:2d:cc:a7:b7:d5:c6:8c:87:66:7d:38:79:
         de:9c:da:bf:75:e6:4f:c4:99:1b:0b:c0:63:4f:0e:fa:28:03:
         97:51:1d:22:4a:f2:30:04:06:59:07:22:ee:5c:ff:05:d7:40:
         7b:f2:48:ee:8c:1e:24:66:f4:fd:ab:34:fb:bf:9e:d3:87:16:
         43:9c:c5:86:e9:58:25:5b:01:54:30:25:05:1b:69:3f:71:75:
         e6:ff:5c:d9:42:b5:c7:73:c3:7e:39:01:69:2f:8c:ff:bb:48:
         e6:80:98:34:cc:9c:42:a3:fc:1e:bb:d9:c6:f0:c0:5b:f6:cd:
         26:ae:1d:60:39:4b:0a:2d:ff:85:ff:ac:d9:95:1a:6d:a3:5f:
         f0:76:89:b3:1b:e2:0a:69:d6:b5:47:67:4d:47:c1:20:cc:d4:
         38:c4:7f:70:29:54:c6:32:cf:b5:30:37:88:88:ff:f2:c9:7a:
         bc:4b:4e:50:30:12:2e:44:c2:22:de:d8:d6:bc:db:ed:da:6c:
         4b:d7:8a:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9Aa554S/EMWCoxs6tsndMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmNWJjNDQwMTQyODViNmYzZTI4NzJhZWNmNWQ0ZjMzZTI2
OGNlOGIwHhcNMjUwNDEzMDcwMTI5WhcNMjUwNDE0MDcwMTI5WjAzMTEwLwYDVQQD
EygxN2ZlMWNjYTA5ZWQ1NmQ0MDA3ODEwNWYwYWE5NjY1NDljM2FjOTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA81RRVcUsGRHqyHTLEw8WtYm4VvHz
A+2bX4mBJU/W+TcvDG6wNDtS0iw/CtZpw8FFSt7kjnD+aZZQCz6gVcyAWXmMtdmZ
CDSGrhihGma3KKBCJIwsRWA8xBGq0C1EYG5jieCrdwoatTbP7UHKiQeXhCFIQy8h
ZiQmGYVyMi1D1+pY+mQYadqDShtLZoaSSg7xxT0ZahmKOBA5mYyH1EODZiZdMXTv
HV5p+8ocbFXLgs0BtQJ9JlgQ4/foyXU/Drow4MBNBG/Frnjo4UyU6b550OMErl9c
XFWkSpvyXNXSIjnwhkhy8Arw5rMcNw2Wv0TEuYq/6r+BMVYaKNTXmjW0YQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBf+HMoJ7VbUAHgQXwqpZlScOskoMB8GA1UdIwQY
MBaAFD9bxEAUKFtvPihyrs9dTzPiaM6LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDF2RVFCUW9XMjgtS0hLdXoxMVBNLUpvem9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8zMjI2OTMtZTU4Yi00OGUyLWJkZDkt
MDI5NTNjZTYzODQzLzEvUDF2RVFCUW9XMjgtS0hLdXoxMVBNLUpvem9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8zMjI2OTMtZTU4Yi00OGUyLWJkZDktMDI5NTNjZTYzODQz
LzEvUDF2RVFCUW9XMjgtS0hLdXoxMVBNLUpvem9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASCfzJZvL
OGmxGbebEF38j0zQ4AOzZJgPOWfvm6dBMRx5NssMgUYynPGOs/UTFX7gZ0vkMnB0
NngUkxEGLcynt9XGjIdmfTh53pzav3XmT8SZGwvAY08O+igDl1EdIkryMAQGWQci
7lz/BddAe/JI7oweJGb0/as0+7+e04cWQ5zFhulYJVsBVDAlBRtpP3F15v9c2UK1
x3PDfjkBaS+M/7tI5oCYNMycQqP8HrvZxvDAW/bNJq4dYDlLCi3/hf+s2ZUabaNf
8HaJsxviCmnWtUdnTUfBIMzUOMR/cClUxjLPtTA3iIj/8sl6vEtOUDASLkTCIt7Y
1rzb7dpsS9eKwg==
-----END CERTIFICATE-----